README.txt

   1 TC(1)                       General Commands Manual                      TC(1)
   2
   3 NAME
   4      tc – Create and interact with trustcaches
   5
   6 SYNOPSIS
   7      tc append [-f flags] [-u uuid | 0] infile file ...
   8      tc create [-u uuid] [-v version] outfile file ...
   9      tc info [-c] [-h] [-e entrynum] file
  10      tc remove [-k] file hash ...
  11
  12 DESCRIPTION
  13      The tc utility is used to get info about and modify Apple trustcaches.
  14
  15      The following commands are supported by tc:
  16
  17      append [-f flags] [-u uuid | 0] infile file ...
  18              Modify the trustcache at infile to include each signed Mach-O at
  19              the specified paths.  If file is both 40 characters and
  20              hexadecimal, that hash will be added to the cache.  uuid is used
  21              to specify a custom uuid to be used.  If it is 0, the uuid will
  22              be left the same, otherwise, it will be regenerated.  If -f is
  23              specified, any new entries with have the flags specified at
  24              flags.
  25
  26      create [-u uuid] [-v version] outfile file ...
  27              Create a trustcache at outfile.  Each Mach-O found in the
  28              specified inputs will be scanned for a code signature and hashed.
  29              Any malformed or unsigned Mach-O will be ignored.  Each slice of
  30              a FAT binary will have its hash included.  Versions 0 and 1 are
  31              supported, if not specified, 1 is assumed.  If uuid is specified,
  32              that will be used instead of a randomly generated one.
  33
  34      info [-c] [-h] [-e entrynum] file
  35              Print information about file.  The output for each hash will be
  36              in the format:
  37
  38                    <cdhash> <flags> [<hash_type>]
  39
  40              If the -c is given, only the hashes will be printed.  If -h is
  41              given, only the header will be printed.  If entrynum is
  42              specified, only that entry will be printed.
  43
  44      remove [-k] file hash ...
  45              Remove each specified hash from file.  If -k is specified, the
  46              uuid will not be regenerated.  The number of removed entries will
  47              be printed.
  48
  49 EXIT STATUS
  50      The tc utility exits 0 on success, and >0 if an error occurs.
  51
  52 SEE ALSO
  53      cryptex-dump-trust-cache(1), cryptex-generate-trust-cache(1)
  54
  55 HISTORY
  56      The tc utility was written by Cameron Katri <me@cameronkatri.com>.
  57
  58 FreeBSD 14.0-CURRENT             May 19, 2022             FreeBSD 14.0-CURRENT